[Remote] Cyber Operator

Note: The job is a remote job and is open to candidates in USA. Fortress Information Security is seeking a Cyber Operator to support the day-to-day execution of vulnerability management workflows for a major client engagement. This role involves monitoring security advisories, coordinating remediation activities, and translating technical findings into clear documentation for both technical and leadership audiences.

Responsibilities

• Support the day-to-day execution of vulnerability management processes in alignment with established workflows, timelines, and program standards
• Monitor security advisories, vendor bulletins, threat feeds, and open-source intelligence sources to identify emerging vulnerabilities and CVE activity, escalating findings to senior analysts for triage and prioritization decisions
• Review vulnerability scanner output, identify asset ownership using CMDB and enterprise asset management data, and assess and document vulnerability applicability across assigned business units or asset groups under senior analyst guidance; coordinate manual data collection or verification for assets and applications not covered by automated scanning
• Create and manage remediation tickets within enterprise ITSM platforms; maintain remediation tracking cadences including follow-up activities, status updates, escalation logging, stakeholder communications, evidence validation, and post-remediation status to confirm closure criteria are met
• Maintain accurate records within the vulnerability management platform, including status updates, communication logs, and documentation entries; assist with periodic data quality reviews to identify and flag inconsistencies for senior analyst review
• Translate analyst findings and program activity into clear, audience-calibrated written deliverables — including leadership readouts, business-unit communications, remediation updates, post-validation summaries, and coordinated-response session readouts — within established turnaround expectations, including same-business-day delivery for high-severity vulnerability events when required
• Own recurring reporting cadences including weekly remediation tracker updates, monthly leadership reports, executive-facing PowerPoint presentations, and related operational communications that communicate operational status, remediation progress, and risk themes clearly and concisely
• Capture and organize meeting notes, action items, escalation details, and operational decisions during coordinated-response sessions, program meetings, team standups, and client meetings
• Exercise editorial judgment when refining communications for clarity, tone, and audience alignment while escalating substantive technical-content changes for senior analyst review and documented approval; produce accurate, audit-ready documentation throughout the vulnerability management lifecycle
• Assist with development and upkeep of templates, process documentation, dashboards, and operational guidance materials; develop familiarity with evolving vulnerability trends, enterprise security practices, and program workflows over time
• Use AI-assisted tools responsibly to support research, drafting, summarization, and documentation tasks while maintaining human review and oversight for all outputs; support additional cybersecurity operational activities and projects as assigned
• Other duties as assigned

Skills

• 1–3 years of experience in cybersecurity, vulnerability management, IT operations, SOC operations, technical writing, communications, program support, or a related field; relevant internship experience, coursework, or completion of a cybersecurity boot camp will be considered
• Working familiarity with cybersecurity concepts including vulnerabilities, patching, CVEs, CVSS scoring, and risk fundamentals; formal training or self-study accepted
• Strong written and verbal communication skills, including the ability to produce clear, organized, audience-calibrated written deliverables and audit-ready documentation; proficiency with Microsoft Office tools including Word, Excel, PowerPoint, Outlook, and SharePoint
• Strong organizational habits with attention to detail and reliable follow-through; ability to manage multiple ongoing workstreams and meet deadlines in a structured, fast-paced operational environment
• Comfort working collaboratively with both technical and non-technical colleagues, with the willingness to learn new tools, platforms, and workflows and apply them consistently
• Ability to leverage AI tools and independently use and refine prompts to enhance the quality, efficiency, and insight of regular work processes
• Hands-on or coursework exposure to enterprise vulnerability scanning platforms (Tenable, Qualys, Rapid7, or similar) and enterprise ITSM or ticketing platforms (ServiceNow, Jira, or similar)
• Experience producing structured written deliverables, executive-facing presentations, or operational reports on a recurring schedule, including work alongside technical teams in a support, coordination, or communications capacity
• Familiarity with SharePoint, Confluence, or similar collaboration and documentation platforms, and with Power BI, Tableau, or similar reporting and dashboard tools
• Exposure to regulated industries such as utilities, energy, defense, healthcare, or financial services, including NERC-CIP environments
• Cybersecurity-related certifications (CompTIA Security+, Network+, CySA+, or equivalent)

Benefits

• Competitive pay structure
• Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
• Company paid life, short- and long-term disability insurance
• Employee Assistance Program
• 401(k) match
• Flexible Paid Time Off
• Parental Leave
• We provide each employee with professional growth opportunities through succession planning, up-skilling, and certifications
• Tuition and certification reimbursement
• Employee Referral Programs
• Company Sponsored Events

Company Overview